Endpoint Protection

 View Only

  • 1.  SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 19, 2017 02:00 PM

    Hello everyone,

    I'm struggling with SEPM upgrade from 12.1.6 MP7 to 14.0.1 (RU1) on external MSSQL database. 

    - SEPM 12.1.6 Mp7 on Windows 2016 (I know it's not officially supported but it works ok :) 

    - MS SQL 2012 Sp3 CU10 on Windows Server 2012 R2 

    After successful installation of 12.1.6 I'm proceeding with upgrade process to 14.0.1. Installation went ok till about 70% (schema update was successful, packages were built, database indexes also) but it ends up with "Error Occurred". From Upgrade log I got this:

    THREAD 75 WARNING: DbUtil> addReporterUser>> Add report login!
    THREAD 75 WARNING: Upgrade> updateTransactionLogFileSize>> final log size is 16384
    THREAD 75 SEVERE: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near '-'.
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(SQLServerException.java:217)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerPreparedStatement.doExecutePreparedStatement(SQLServerPreparedStatement.java:426)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerPreparedStatement$PrepStmtExecCmd.doExecute(SQLServerPreparedStatement.java:372)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.TDSCommand.execute(IOBuffer.java:6276)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(SQLServerConnection.java:1793)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(SQLServerStatement.java:184)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(SQLServerStatement.java:159)
    THREAD 75 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerPreparedStatement.execute(SQLServerPreparedStatement.java:354)
    THREAD 75 SEVERE: at com.sygate.scm.server.db.util.DbUtil.addReporterLogin(DbUtil.java:1258)
    THREAD 75 SEVERE: at com.sygate.scm.server.db.util.DbUtil.configReporterUser(DbUtil.java:1163)
    THREAD 75 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.doUpgrade(Upgrade.java:2228)
    THREAD 75 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeTask.go(UpgradeTask.java:135)
    THREAD 75 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeProgressPanel$2.construct(UpgradeProgressPanel.java:250)
    THREAD 75 SEVERE: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:153)
    THREAD 75 SEVERE: at java.lang.Thread.run(Thread.java:748)
    THREAD 75 SEVERE: Upgrade.doUpgrade com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near '-'.
     
    SQL is Windows Integrated, connectivity is ok, password complexity is ok (without complex password You will get Cannot alter the user 'REPORTER_sem5...). domain account which was used has " - " in login name but that will be silly ;)) 
     
    Any ideas ?? 
     
    Thanks, 


  • 2.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 19, 2017 02:08 PM

    Is there a SEPM_INST.log file in the %temp% directory as well?

    Does the same error occur if you try to run the upgrade.bat file after it initially fails?

    You may need to engage support so they can have a look.



  • 3.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 19, 2017 02:22 PM

    Yes, SEPM_INST.log is there but looks like it's related to 12.1.6 installation .. don't see any specific errors over there.

    I spoke too soon. This time after running upgrade.bat error at 58% :(((  

    THREAD 74 WARNING: Upgrade> updateTransactionLogFileSize>> final log size is 16384
    THREAD 74 SEVERE: com.microsoft.sqlserver.jdbc.SQLServerException: Cannot alter the user 'REPORTER_sem5DEV-SEPM-TEST', because it does not exist or you do not have permission.
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerException.makeFromDatabaseError(SQLServerException.java:217)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.getNextResult(SQLServerStatement.java:1635)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.doExecuteStatement(SQLServerStatement.java:865)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement$StmtExecCmd.doExecute(SQLServerStatement.java:762)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.TDSCommand.execute(IOBuffer.java:6276)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(SQLServerConnection.java:1793)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeCommand(SQLServerStatement.java:184)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeStatement(SQLServerStatement.java:159)
    THREAD 74 SEVERE: at com.microsoft.sqlserver.jdbc.SQLServerStatement.executeUpdate(SQLServerStatement.java:687)
    THREAD 74 SEVERE: at com.sygate.scm.server.db.util.DbUtil.grantReporterRights(DbUtil.java:1459)
    THREAD 74 SEVERE: at com.sygate.scm.server.upgrade.Upgrade.doUpgrade(Upgrade.java:2241)
    THREAD 74 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeTask.go(UpgradeTask.java:135)
    THREAD 74 SEVERE: at com.sygate.scm.server.upgrade.ui.UpgradeProgressPanel$2.construct(UpgradeProgressPanel.java:250)
    THREAD 74 SEVERE: at com.sygate.scm.util.SwingWorker$2.run(SwingWorker.java:153)
    THREAD 74 SEVERE: at java.lang.Thread.run(Thread.java:748)
    THREAD 74 SEVERE: Upgrade.doUpgrade com.microsoft.sqlserver.jdbc.SQLServerException: Cannot alter the user 'REPORTER_sem5DEV-SEPM-TEST', because it does not exist or you do not have permission.

     



  • 4.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 19, 2017 02:29 PM

    Does that user account that you're using have the correct permissions? Maybe a dumb question but the last line seems to indicate that it doesn't.



  • 5.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 19, 2017 03:25 PM

    This time I've configured SQL account without " - " char in login, then I go to Configuration Wizard and reconfigure connection credentials for SQL, wizard finishes then I rerun upgrade.bat and SUCCESS. I'm able to login to console, test clients got connected. No previous errors in Upgrade log. 

    I think I'll start from the scratch again to have 100% sure that this issue is related to domain account name and " - " in it.

    Let You know afterward. 

    Thanks



  • 6.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 20, 2017 04:29 PM

    Hi again,

    As expected starting all over again with domain account without " - " char in login name did the job. Everything went smooth :)

    Summarizing special characters used in login name might me problematic with MS SQL Windows Integrated accounts. So while upgrading keep that in mind :) 

     

    Wondering if it occurs with Embedded database. Another scenario to test



  • 7.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 20, 2017 04:54 PM

    See if this helps:

    http://www.symantec.com/docs/TECH163013



  • 8.  RE: SEPM 12.1.6 MP7 upgrade to 14.0.1 (RU1)

    Posted Nov 21, 2017 06:11 AM

    True embedded database no go .. forgot the take a look in that article ..silly me. But it doesn't complety cover section about requirements for Database Windows Authenticated user

    SQL Server Database Administrator with Windows Authentication:

    • <subhead> Uses the existing Windows username and password for the database server. </subhead>

    But probably requirements has to be similar to SQL Server Administrator Name (DBA user).

    On the other hand no issues while installing 12.1.6 MP7.

    Anyways thanks for help .. Case closed.

    Greets